Red Hat Security Advisory

RHSA-2023:5580

kpatch-patch security update

Released 2023-10-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v. 8.2) kpatch-patch-4_18_0-193_100_1-1-4.el8_2, kpatch-patch-4_18_0-193_105_1-1-3.el8_2, kpatch-patch-4_18_0-193_109_1-1-2.el8_2 +1

Fixes 1 record

TI-2022-20892 CVE-2022-42896 · GHSA-pvw8-76h2-7q32

Info Leak in l2cap_core in the Linux Kernel

MEDIUM 45

There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotel…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02462 Published 2022-11-23 Partial fix CWE-416